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Requirements are too often co-mingied with design element 
way to focus on capturing only the essentials, with UML. 

Many developers regard requirements capture with a disdain nornn 
for Windows crashes and Richard Simmons exercise videos. They s 
of time that diverts them from what they ought to be doing: crank 
However, in a requirements-driven process, the developers always 
what they're doing actually relates to the goals and purposes of th< 

To properly understand what features ought to be designed and im 
well as how they ought to work, it is necessary to have a deep und 
the following concepts: the purposes of the system; the workflow c 
applicable) with respect to the system; the set of features the syst 
the devices with which it must interact and how those interactions 
what should happen when something expected or "bad" occurs; an 
the features must be visible to the user and the external devices. 1 
part of the requirements or specification of the system. If you und( 
requirements thoroughly, your development work will be more pro- 
have less reworking to do, and your customers will be happy. 

In a requirements-centric development, all work relates in some w 
requirements specification of the system. Early in analysis, we try • 
how the system fits into its environment (including the user). Soor 
detailing exactly which features we want the system to provide to i 
work in that environment and exactly how we want those features 
elements in the system's environment. Later, we design the intern- 
system to meet those specifications, and finally we construct test \ 
system to ensure the appropriate level of completeness, fidelity, ar 



http://ww.embedded.com/story/OEG200 1 1 0 1 6S0 1 26 



10/1/05 



Embedded.com - Capturing Real-Time Requirements 



Page 2 of 12 



on the COM Express connector and 
signal definition. 



More News From Eofope ► 



:> Prc^uct Oem^ 

>; internet Resources ; 



> CD-ROM 

> Embedded Book$ 



NetSefjninar 



A list of upcoming NetSeminars, 
plus a link to the Rr<:hb{3.. 

• B.oirlS :.../vVh.g.t .Ey.i3 ry' o n c 
liability n^k 



Chain 



• Syrichfcricu£^ Product 





like never before. 



I find that real-time and embedded developers often have difficultv 
requirements from design. The chosen design is usually just one oj 
of meeting the requirements. Many bright and experienced develof 
the design aspect so ingrained in them that they find this distinctio 
have developed an approach for understanding, capturing, and ma 
requirements based on my work with complex projects at NASA an 
which is the focus of this article. This approach is part of the ROPE: 

Types of requirements 

Just as there are two kinds of people (those who divide people into 
those who don't), there are two kinds of requirements: functional c 
service. Functional requirements encompass what the system shou 
it should behave in a variety of circumstances. For example: 

• The system shall adjust the angle of the telescope under use 

• The system shall deliver anesthetic agents in gaseous form a 
concentration. 

• Locking clamps shall engage when the elevator cable breaks. 

• The device shall alarm if the heart rate falls below 30 beats f 

Quality of service (QoS) requirements specify how well a functiona 
shall be accomplished. In real-time and embedded systems, QoS n 
may specify properties of the system (for example, range, speed, t 
capacity, reliability, maintainability, evolvability, time to market, s; 
predictability, schedulability), or properties of the process. As a rul 
it's something that can be quantified or optimized, then it is a QoS 
For example (QoS requirements italicized): 

• The angle of the telescope shall be set in units of 0.1 degree: 
maximum error of 0.01 degrees. 

• The anesthetic agient shall be controllable from 0.00% to 5.0 
in units of 0.01% with an accuracy of 0.005%. 

• Locking clamps shall engage in the event of an elevator supp 
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breakage within less than 0,5 seconds. 

• The device shall alarm within 10 seconds if the heart rate fall 
beats per minute. 

The defining characteristic of real-time systems is the level to whic 
requirements figure into the correctness of the system. In non-rea 
late is acceptable. In real-time systems, late is unacceptable. Put c 
real-time system is not necessarily fast, but it is predictably timely 
real-time systems may be hard real-time, which means that respoi 
for aperiodic systems or actions taken when a periodic task begins 
systems) must complete by a specified deadline. 

Systems may also be soft real-time. For example: 

• Event responses shall be handled on average within a certair 

• A certain number of event responses shall be handled within 
timeframe. 

• A specified failure rate is permitted. 

Because the mathematics required to analyze soft real-time systen 
difficult than for the simpler, hard real-time case, it is very commo 
real-time systems as hard real-time to simplify the analysis, £2] Th 
approach is an overdesign of the system, with, typically, an increa* 
recurring cost due to the overdesigned hardware platform. 

In my approach, functional requirements are modeled as use cases 
specifications, actions, and message sequences, QoS requirements 
as constraints of some kind, applied against one or more functiona 

Use cases 

A use case is a named coherent collection of related requirements 
around system capability. A use case is large-scale, typically corre* 
three to 10 pages of textual requirements. Use cases define little ir 
specific requirements per se, but they serve as a way to organize c 
them. A good use case; 

• Focuses on the user's or actor's perspective of the system (n 
implementation of its interfaces or its internals) 

• Captures a closely related set of requirements 

• Returns a result visible to one or more actors 

• Does not reveal or imply system internal structure or implem 

• Is independent from other use cases and may be concurrent 

• Consists of a set of messages exchanged between the systen 
more actors (more than just one!) 

Relationships among use cases can be used, but there's a caveat: 
newcomers to use case modeling use these relationships to do a fu 
decomposition of the system's internal structure; this is not what t 
The purpose of use case relations is to depict relations among thes 
requirements. The most common relations are specializations (ster 
specific) of the dependency relation (shown using a dashed line wii 
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arrowhead). The <<includes>> relation means that a larger use c; 
smaller one. For example, a use case for a spacecraft might be "Ta 
a planet" and another might be "Send information to Earth-side St; 
Executing each of these use cases involves rolling the spacecraft tc 
orientation-either to point the camera at the planet or to aim the a 
Earth. Thus, they could both <<includes>> a smaller use case, su' 
Attitude." 

<<extends>> is similar to <<includes>> except that the smaller i 
optional and only used in certain situations. For example, suppose 
commands sent to a spacecraft could. potentially lead to a loss of tl 
You might want user validation and authorization guaranteed befor 
.CGpyriabU0.JM5„^^^^^ such commands. In this case, the larger "Process Ground Comman 

Privricv statemerv?. might be extended by a "Validate User." 

Additionally, one use case may be more general or specific than an 
example, there may be multiple ways to do a Validate User use ca* 
Authorization Code, Validate by Fingerprint Scan, or Validate by Vc 
Recognition. Each of these is a specialized form of the general Vali( 
case. 

We will use these relations in a very specific way when we capture 
for large complex systems. 

Detailed requirements 

Since a use case is a container of detailed requirements, just provi 
of the use case isn't enough. We need to provide the details. In th( 
process we call this "detailing the use case." 

There are two primary means to detail a use case-by example or b 
By far, the most common is by example. This is done by constructi 
scenarios of message exchange between the system and the actor: 
associated with that use case. This approach has advantages and c 
The advantages include the simplicity of the representation and th< 
which non-technical stakeholders can understand how the system ( 
respect to the use case. The disadvantages include the fact that a 
represented by an infinite set of scenarios; the number that is actt 
must be trimmed down somehow. Also, there is typically no way tc 
when you give an example. That is, there is no way to specify proh 
behaviors. 

Detailing a use case by specification gets around these disadvantac 
a single location for the details that applies to each of the infinite s 
It can also state prohibitions as requirements. On the downside, pc 
formal languages (such as statecharts) are used to specify requirei 
digit IQ is required, which may disallow certain managers and mar 
understanding the requirements. My recommendation is to general 
we will see later. 

Scenarios and message sequence charts 

A scenario is a specific path through a use case. The most commor 
of a scenario is a message sequence chart, as shown in Figure 1. T 
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are called instance lines, and at the system specification level, the^ 
actors and either the use case or the system fulfilling the role of th 
prefer to use the use case because it helps me identify the context 
particular scenario. Note that at this level, we do not include objec 
system. Looking ahead, later we will add internal objects to our sc< 
how our designs actually meet our requirements, but they should r 
system-level use case scenarios. The goal at this point is to captun 
not design. 



!Ffgure:il:::Sce^ 




A typical system might have anywhere from half a dozen to a doze 
and each use case might have half a dozen to several dozen scena 
Since there is an infinite set from which the scenarios can be drawi 
decide which ones to explicitly represent? The ROPES process guid 
add scenarios to a use case only when they demonstrate or depict 
more new requirements. You're done when you can't come up with 
that add a new requirement. 



Functional requirements are shown on sequence diagrams as ordei 
sequences. That is, you're showing that a particular sequence of m 
be allowed. If the order within a message set is unimportant, you ( 
constraint {unordered} to the set of messages. QoS requirements 
constraints that attach to the instance lines, individual messages, ( 
messages. The most common constraints are timeliness constraint 
applied to an ordered pair of messages. In Figure 1, a timing const 
down at the bottom using a common notation: a vertical line betwj 
horizontal bars marking points in time on the scenario. Other QoS 
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shown in note boxes on the right of the diagram. 
Specifications for requirements capture 

The other primary approach to detailing requirements is to do it by 
Either informal or formal languages can be used, or a combination 
informal languages, we usually mean written specifications. Some 
elaborate fields used to specify the use case. For example, Schneic 
suggest:!?.]. 



• Use case name 

• Actors 

• Priority (project) 

• Status (project) 

• Preconditions 

• Postconditions 

• Extension points 

• Included use cases 

• Flow of events 

• List of related diagrams (sequence, statechart, activity, and : 

Of these, I feel only the preconditions and postconditions are requi 
things are shown using other views (such as the diagrams themsel 

For formal languages, the UML provides the statechart and its cous 
chart. Statecharts are most applicable when the use case has state 
distinguishable conditions of existence as defined by a set of event 
accepted, behaviors performed, and reachability of subsequent sta 
use case is in State A, it accepts a certain set of messages and eve 
certain set of behaviors, and can reach a finite set of other states, 
distinguishable from other such states in that one or more of these 
different. When an autopilot is executing "Controlling Flight Path," 
certain things it can and cannot do when taking off vs. when in cru 
states. 



Activity charts are just a specialized form of a statechart. Activity c 
when the primary means to transition from one state to the next d 
completion of the actions executed within a state rather than upon 
explicit message or event from somewhere else. 

Consider a soda pop machine with two actors (the Customer and tl 
Rep). Let's focus on a Deliver Soda Can use case. It is difficult to ir 
individually all the possible ways in which users might insert coins 
buttons to get a can of soda from the machine, even without the a 
the price. However, it is relatively straightforward to do so using a 
shown in Figure 2. 
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The statechart in the figure has only four states to manage the trai 
user inserting coins and selecting the desired flavor of soda,£41 All 
directly relevant to the specification of the use case are shown on 1 
(although not their implementation). Notice also that no internal ol 
identified, but some data are: specifically, amt tracks how much th 
entered, and AMOUNT_REQUIRED is the cost of a single can of sod 
various operations used within the actions, but it isn't at all impliec 
there are or how they relate to each other. 

In fact, a set of objects will realize this use case (thaf s UML-speak 
"implement"). All that we can be sure of is that, in any correct desi 
specified will collectively be able to provide the services as specifie 
statechart in Figure 2. 

In the final analysis, either statecharts or activity diagrams can be 
specification of requirements. 

Relating specifications and scenarios 

When you use a formal language, such as statecharts, to specify a 
are capturing the entire infinite set of scenarios all in one place. A 
nothing more than a particular path through the statechart. For ex 
shows one particular scenario represented by this statechart. In th 
cost of the soda is 55 cents. The customer puts in two quarters am 
receives a nickel in change. Then he selects Coke, but there is no r 
the machine displays a message to that effect. The customer then 
Coke and the system delivers it. Notice that some of the relevant s 
state machine are shown on the use case instance line-this aids th< 
relating the scenario back to the statechart specification. 
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Of course, there are other paths through the statechart; these are 
scenarios. In general, you will want to construct the set of scenaric 
statechart. You do this by making a different scenario for every dif 
through the statechart, although you'll only want to do the looping 
and representative examples of the concurrent regions (and-states 



Moving from requirements into design 

As mentioned earlier, a use case is ultimately realized by a set of c 
together to provide the necessary behavior. This set of objects is c 
collaboration in UML. It has a specific notation (a dashed oval) thai 
commonly used. Most often, the use case collaboration is shown aj 
diagram, showing the relevant classes of the objects that participa 
in the collaboration. 



Getting a good set of objects can be tricky, as it is not at all obviot 
case model. In the ROPES process, you use object identification sti 
identify the object participating in the collaboration. The ROPES pn 
about a dozen different strategies which, while different and distin< 
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the objects they find to a significant degree. Commonly, you will a| 
four different strategies simultaneously to identify all objects in the 
Using such an approach, one could come up with an object model ; 
shown in Figure 4. 



: Figure 4 :: Sp<la;m^^^ 



The really important question is how do you ensure and demonstre 
design model really does realize the use case model? The answer i: 
execution. We evaluate and demonstrate the adequacy of a design 
executing that design model. Specifically, we want to execute the > 
scenarios we used to state requirements using the newly added de 
If the design can execute all of the requirements then we've done • 
can't, then we need to fix our design model. 

To do this, first we come up with a set of scenarios at the system t 
where the players are the actors and The System (or the system p 
of a specific use case). To test the adequacy of a design, we do the 
scenarios but now we add the design elements to the scenario and 
exchange of messages among them necessary to fully realize the t 

Figure 5 is the same scenario shown in Figure 3, but we've added 1 
collaborative elements from the class diagram.XSl We can walk thi 
scenario and see how the objects inside the system collaborate to i 
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This approach of validation via execution can be applied at any lievi 
abstraction. As we add more detail to a highly complex system witi 
components, and composite classes, we can be sure that we're doi 
when, at the specified level of abstraction, it executes all of the sc€ 
for the use case. 



This approach means that even if you use statecharts to specify re- 
you will also draw scenarios. Since a statechart can have loops anc 
regions, it can represent an infinite set of scenarios. Which scenari- 
draw and trace through the levels of design abstraction? Again, the 
process has an answer: draw a scenario for every non-looping patf 
or-states and each looping path exactly once; for concurrent regioi 
representative interleaving of the concurrent regions. 



Caught 



We've discussed an approach to the capturing of requirements for 
embedded systems that has been shown to be effective in projects 
small. Use cases, as defined in the UML, are used as an organizing 
managing requirements and a combination of scenarios and specifi 
capture the detailed requirements. For large systems, a system en 
captures the subsystem architecture and maps the level-0 use cas( 
allows teams to go off and work independently with some assuranc 
subsystems will properly fit into the system when they're all done. 



Bruce Powel Douglass has over 20 years of experience designing 
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real-time applications in a variety of hard real-time environments, 
authored several books, including Real-Time UML and Doing Hard '. 
Developing Real-Time Systems with UML, Objects, Frameworks am 
Bruce worked with methodologists at Rational and other companie; 
UML specification. Bruce is Chief Evangelist at I-Logix, and can be 
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1. Douglass, Bruce Powel. " On the ROPES/ ' Embedded Systems Pn 
December 2000, p. 140. 

2. There is the old saying that hard real-time systems are hard, bu 
systems are harder, meaning that the accurate characterization of 
systems is technically much more difficult. 
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3. Schneider, Geri and Jason P. Winters. Applying Use Cases: A Pre 
New York: Addison-Wesley, 1998. 
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4. Douglass, Bruce Powel. " UML Statecharls /' Embedded Systems. 
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5. Remember that scenarios show instances, not types (that is, cla 
scenario has two different Rack instances, for example, but the cla 
shows only a single Rack class. 
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By Bruce Powel Douglass 
Embedded Systems Programming 
ai/oT/Ol, 09:37:50 AM EST) 



Requirements are too often co-mingled with design element 
way to focus on capturing only the essentials, with UML. 

Many developers regard requirements capture with a disdain norm 
for Windows crashes and Richard Simmons exercise videos. They s 
of time that diverts them from what they ought to be doing: crank 
However, in a requirements-driven process, the developers always 
what they're doing actually relates to the goals and purposes of th( 

To properly understand what features ought to be designed and im 
well as how they ought to work, it is necessary to have a deep und 
the following concepts: the purposes of the system; the workflow c 
applicable) with respect to the system; the set of features the syst 
the devices with which it must interact and how those interactions 
what should happen when something expected or "bad" occurs; an 
the features must be visible to the user and the external devices. 1 
part of the requirements or specification of the system. If you und( 
requirements thoroughly,. your development work will be more pro- 
have less reworking to do, and your customers will be happy. 

In a requirements-centric development, all work relates in some w 
requirements specification of the system. Early in analysis, we try • 
how the system fits into its environment (including the user). Soor 
detailing exactly which features we want the system to provide to i 
work in that environment and exactly how we want those features 
elements in the system's environment. Later, we design the intern, 
system to meet those specifications, and finally we construct test \ 
system to ensure the appropriate level of completeness, fidelity, ar 
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I find that real-time and embedded developers often have difficultv 
requirements from design. The chosen design is usually just one ol 
of meeting the requirements. Many bright and experienced develop 
the design aspect so ingrained in them that they find this distinctio 
have developed an approach for understanding, capturing, and ma 
requirements based on my work with complex projects at NASA an 
which is the focus of this article. This approach is part of the ROPE: 

Types of requirements 

Just as there are two kinds of people (those who divide people into 
those who don't), there are two kinds of requirements: functional < 
service. Functional requirements encompass what the system shou 
it should behave in a variety of circumstances. For example: 

• The system shall adjust the angle of the telescope under use 

• The system shall deliver anesthetic agents in gaseous form a 
concentration. 

• Locking clamps shall engage when the elevator cable breaks. 

• The device shall alarm if the heart rate falls below 30 beats f 

Quality of service (QoS) requirements specify how well a functiona 
shall be accomplished. In real-time and embedded systems, QoS n 
may specify properties of the system (for example, range, speed, t 
capacity, reliability, maintainability, evolvability, time to market, si 
predictability, schedulability), or properties of the process. As a rul 
it's something that can be quantified or optimized, then it is a QoS 
For example (QoS requirements italicized): 

• The angle of the telescope shall be set in units of 0.1 degree: 
maximum error of 0.01 degrees. 

• The anesthetic agent shall be controllable from 0.00% to 5.0 
in units of 0.01% with an accuracy of 0.005%. 

• Locking clamps shall engage in the event of an elevator supp 
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breakage within less than 0.5 seconds. 

• The device shall alarm within 10 seconds if the heart rate fall 
beats per minute. 

The defining characteristic of real-time systems is the level to whic 
requirements figure into the correctness of the system. In non-rea 
late is acceptable. In real-time systems, late is unacceptable. Put e 
real-time system is not necessarily fast, but it is predictably timely 
real-time systems may be hard real-time, which means that respoi 
for aperiodic systems or actions taken when a periodic task begins 
systems) must complete by a specified deadline. 

Systems may also be soft real-time. For example: 

• Event responses shall be handled on average within a certair 

• A certain number of event responses shall be handled within 
timeframe. 

• A specified failure rate is permitted. 

Because the mathematics required to analyze soft real-time systen 
difficult than for the simpler, hard real-time case, it is very commo 
real-time systems as hard real-time to simplify the analysis. £2 J Th 
approach is an overdesign of the system, with, typically, an increa; 
recurring cost due to the overdesigned hardware platform. 

In my approach, functional requirements are modeled as use cases 
specifications, actions, and message sequences. QoS requirements 
as constraints of some kind, applied against one or more functiona 

Use cases 

A use case is a named coherent collection of related requirements 
around system capability. A use case is large-scale, typically corre* 
three to 10 pages of textual requirements. Use cases define little ir 
specific requirements per se, but they serve as a way to organize c 
them. A good use case: 

• Focuses on the user*s or actor*s perspective of the system (n 
implementation of its interfaces or its internals) 

• Captures a closely related set of requirements 

• Returns a result visible to one or more actors 

• Does not reveal or imply system internal structure or implem 

• Is independent from other use cases and may be concurrent 

• Consists of a set of messages exchanged between the syster 
more actors (more than just one!) 

Relationships among use cases can be used, but there's a caveat: 
newcomers to use case modeling use these relationships to do a fu 
decomposition of the system's internal structure; this is not what t 
The purpose of use case relations is to depict relations among thes 
requirements. The most common relations are specializations (ster 
specific) of the dependency relation (shown using a dashed line wil 
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arrowhead). The <<includes>> relation means that a larger use a 
smaller one. For example, a use case for a. spacecraft might be "Ta 
a planet" and another might be "Send information to Earth-side St 
Executing each of these use cases involves rolling the spacecraft tc 
orientation-either to point the camera at the planet or to aim the a 
Earth. Thus, they could both <<includes>> a smaller use case, su< 
Attitude." 

<<extends>> is similar to <<includes>> except that the smaller i 
optional and only used in certain situations. For example, suppose 
commands sent to a spacecraft could potentially lead to a loss of tl 
You might want user validation and authorization guaranteed befor 
.copyr:aht/^^„^^^^^ such commands. In this case, the larger "Process Ground Comman 

Privcicv stBtemertt might be extended by a "Validate User." 

Additionally, one use case may be more general or specific than an 
example, there may be multiple ways to do a Validate User use ca< 
Authorization Code, Validate by Fingerprint Scan, or Validate by Vc 
Recognition. Each of these is a specialized form of the general Valic 
case. 

We will use these relations in a very specific way when we capture 
for large complex systems. 

Detailed requirements 

Since a use case is a container of detailed requirements, just provi 
of the use case isn't enough. We need to provide the details. In the 
process we call this "detailing the use case." 

There are two primary means to detail a use case-by example or b 
By far, the most common is by example. This is done by constructi 
scenarios of message exchange between the system and the actor: 
associated with that use case. This approach has advantages and c 
The advantages include the simplicity of the representation and th< 
which non-technical stakeholders can understand how the system \ 
respect to the use case. The disadvantages include the fact that a 
represented by an infinite set of scenarios; the number that is actu 
must be trimmed down somehow. Also, there is typically no way tc 
when you give an example. That is, there is no way to specify proh 
behaviors. 

Detailing a use case by specification gets around these disadvanta? 
a single location for the details that applies to each of the infinite s 
It can also state prohibitions as requirements. On the downside, pc 
formal languages (such as statecharts) are used to specify requirei 
digit IQ is required, which may disallow certain managers and mar 
understanding the requirements. My recommendation is to general 
we will see later. 

Scenarios and message sequence charts 

A scenario is a specific path through a use case. The most commor 
of a scenario is a message sequence chart, as shown in Figure 1. T 
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are called instance lines, and at the system specification level, the^ 
actors and either the use case or the system fulfilling the role of th 
prefer to use the use case because it helps me identify the context 
particular scenario. Note that at this level, we do not include objec 
system. Looking ahead, later we will add internal objects to our sc< 
how our designs actually meet our requirements, but they should r 
system-level use case scenarios. The goal at this point is to captur 
not design. 



;:Rgure:;l;::Scenarl<>:e)^ 





Iditt 



I. i*^l59!wf^ s^tin ni^s <3fii« 



: : I j»AceAtrJif»<<> mV) ; ; 1 



A typical system might have anywhere from half a dozen to a doze 
and each use case might have half a dozen to several dozen scena 
Since there is an infinite set from which the scenarios can be drawi 
decide which ones to explicitly represent? The ROPES process guid 
add scenarios to a use case only when they demonstrate or depict 
more new requirements. You're done when you can't come up with 
that add a new requirement. 

Functional requirements are shown on sequence diagrams as ordei 
sequences. That is, you're showing that a particular sequence of m 
be allowed. If the order within a message set is unimportant, you c 
constraint {unordered} to the set of messages. QoS requirements 
constraints that attach to the instance lines, individual messages, < 
messages. The most common constraints are timeliness constraint 
applied to an ordered pair of messages. In Figure 1, a timing const 
down at the bottom using a common notation: a vertical line betwe 
horizontal bars marking points in time on the scenario. Other QoS 
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shown in note boxes on the right of the diagram. 
Specifications for requirements capture 

The other primary approach to detailing requirements is to do it by 
Either informal or formal languages can be used, or a combination 
informal languages, we usually mean written specifications. Some 
elaborate fields used to specify the use case. For example, Schneic 
suggest:I3J 

• Use case name 

• Actors 

• Priority (project) 

• Status (project) 

• Preconditions 

• Postconditions 

• Extension points 

• Included use cases 

• Flow of events 

• List of related diagrams (sequence, statechart, activity, and ; 

Of these, I feel only the preconditions and postconditions are requi 
things are shown using other views (such as the diagrams themsel 

For formal languages, the UML provides the statechart and its cous 
chart. Statecharts are most applicable when the use case has state 
distinguishable conditions of existence as defined by a set of event 
accepted, behaviors performed, and reachability of subsequent sta 
use case is in State A, it accepts a certain set of messages and eve 
certain set of behaviors, and can reach a finite set of other states, 
distinguishable from other such states in that one or more of these 
different. When an autopilot is executing "Controlling Flight Path," 
certain things it can and cannot do when taking off vs. when in cru 
states. 

Activity charts are just a specialized form of a statechart. Activity c 
when the primary means to transition from one state to the next d 
completion of the actions executed within a state rather than upon 
explicit message or event from somewhere else. 

Consider a soda pop machine with two actors (the Customer and tl 
Rep). Let's focus on a Deliver Soda Can use case. It is difficult to ir 
individually all the possible ways in which users might insert coins 
buttons to get a can of soda from the machine, even without the a 
the price. However, it is relatively straightforward to do so using a 
shown in Figure 2. 
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The statechart in the figure has only four states to manage the trai 
user inserting coins and selecting the desired flavor of soda.I41AII 
directly relevant to the specification of the use case are shown on 1 
(although not their implementation). Notice also that no internal ol 
identified, but some data are: specifically, amt tracks how much th 
entered, and AMOUNT_REQUIRED is the cost of a single can of sod 
various operations used within the actions, but it isn't at all impliec 
there are or how they relate to each other. 



In fact, a set of objects will realize this use case (that's UML-speak 
"implement"). All that we can be sure of is that, in any correct desi 
specified will collectively be able to provide the services as specifie 
statechart in Figure 2. 



In the final analysis, either statecharts or activity diagrams can be 
specification of requirements. 

Relating specifications and scenarios 

When you use a formal language, such as statecharts, to specify a 
are capturing the entire infinite set of scenarios all in one place. A 
nothing more than a particular path through the statechart. For ex. 
shows one particular scenario represented by this statechart. In th 
cost of the soda is 55 cents. The customer puts in two quarters an< 
receives a nickel in change. Then he selects Coke, but there is no r 
the machine displays a message to that effect. The customer then 
Coke and the system delivers it. Notice that some of the relevant s 
state machine are shown on the use case instance line-this aids tht 
relating the scenario back to the statechart specification. 
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Of course, there are other paths through the statechart; these are 
scenarios. In general, you will want to construct the set of scenario 
statechart. You do this by making a different scenario for every dif 
through the statechart, although you'll only want to do the looping 
and representative examples of the concurrent regions (and-states 



Moving from requirements into design 



As mentioned earlier, a use case is ultimately realized by a set of c 
together to provide the necessary behavior. This set of objects is c 
collaboration in UML It has a specific notation (a dashed oval) thai 
commonly used. Most often, the use case collaboration is shown aj 
diagram, showing the relevant classes of the objects that participa 
in the collaboration. 



Getting a good set of objects can be tricky, as it is not at all obviot 
case model. In the ROPES process, you use object identification sti 
identify the object participating in the collaboration. The ROPES pn 
about a dozen different strategies which, while different and distint 
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the objects they find to a significant degree. Commonly, you will d| 
four different strategies simultaneously to identif/ all objects in the 
Using such an approach, one could come up with an object model ; 
shown in Figure 4. 



: Rgure;^:: : $dda 



The really important question is how do you ensure and demonstre 
design model really does realize the use case model? The answer i: 
execution. We evaluate and demonstrate the adequacy of a design 
executing that design model. Specifically, we want to execute the \ 
scenarios we used to state requirements using the newly added de 
If the design can execute all of the requirements then we've done . 
can't, then we need to fix our design model. 

To do this, first we come up with a set of scenarios at the system l 
where the players are the actors and The System (or the system p 
of a specific use case). To test the adequacy of a design, we do the 
scenarios but now we add the design elements to the scenario and 
exchange of messages among them necessary to fully realize the t 

Figure 5 is the same scenario shown in Figure 3, but we've added 1 
collaborative elements from the class diagram.I.Sl We can walk thi 
scenario and see how the objects inside the system collaborate to i 






"1 1 
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This approach of validation via execution can be applied at any lev( 
abstraction. As we add more detail to a highly complex system witi 
components, and composite classes, we can be sure that we're doi 
when, at the specified level of abstraction, it executes all of the sc€ 
for the use case. 



This approach means that even if you use statecharts to specify re- 
you will also draw scenarios. Since a statechart can have loops anc 
regions, it can represent an infinite set of scenarios. Which scenari- 
draw and trace through the levels of design abstraction? Again, the 
process has an answer: draw a scenario for every non-looping patf 
qr-states and each looping path exactly once; for concurrent regioi 
representative interleaving of the concurrent regions. 

Caught 

We've discussed an approach to the capturing of requirements for 
embedded systems that has been shown to be effective in projects 
small. Use cases, as defined in the UML, are used as an organizing 
managing requirements and a combination of scenarios and specifi 
capture the detailed requirements. For large systems, a system en 
captures the subsystem architecture and maps the level-0 use cas< 
allows teams to go off and work independently with some assuranc 
subsystems will properly fit into the system when they're all done. 

Bruce Powel Douglass has over 20 years of experience designing 
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real-time applications in a variety of hard real-time environments, 
authored several books, including Real-Time UML and Doing Hard '. 
Developing Real-Time Systems with UML, Objects, Frameworks am 
Bruce worked with methodologists at Rational and other companie; 
UML specification. Bruce is Chief Evangelist at I-Logix, and can be 

Endnotes 

1. Douglass, Bruce Rowel. " On the ROPES, " Embedded Systems Pn 
December 2000, p. 140. 

2. There is the old saying that hard real-time systems are hard, bu 
systems are harder, meaning that the accurate characterization of 
systems is technically much more difficult. 

Back 

3. Schneider, Geri and Jason P. Winters. Applying Use Cases: A Pn 
New York: Addison-Wesley, 1998. 

Back 

4. Douglass, Bruce Rowel. " UML Statecharls ." Embedded Systems 
January 1999, p. 22. 

5. Remember that scenarios show instances, not types (that is, cla 
scenario has two different Rack instances, for example, but the cla 
shows only a single Rack class. 

Back 
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Reaf-time video capture creates memory power concerns 



By Ivan Greenberg 
EE Times 
Jun 28, 2004 



As carriers and content providers usher in the wireless lifestyle, handsets wil 
unprecedented transformation. Video capture and 3-D gaming at VGA resolu 
megapixel image capture will all become commonplace in the next two years 



Until recently, mobile processors, 
LCD displays, image sensors and RF 
power amplifiers have been the focus 
of system designers. However, with 
the advent of new applications like 3- 
D gaming, designers are becoming 
increasingly aware of the energy 
consumed by the handsets memory 
subsystem. 

Tomorrow's handsets will shuffle 
voluminous amounts of media 
between processor and memory 
subsystem, creating a new power hot 
spot in memory. Unlike yesterday's 
phone, whose internal data transfer 
was fundamentally limited to protocol 
stack processing, next-generation 



rechinicai Ewanti 

® OnHne Demos 
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handsets will perform advanced signal processing on two-dimensional data s 
4, H.264, JPEG2000 and 3-D image processing. Additionally, business applic 
as Excel, PowerPoint, Word and Outlook will become commonplace on tomor 
phones. 

To meet these requirements, memory suppliers are looking at the expected t 
and use model patterns of tomorrow's media-rich handset in order to formul- 
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techniques for reducing energy consumption of this memory subsystem. As ; 
handset system designers have a plethora of low-power memory platforms f 
to choose. These platforms are typically offered in multichip packages to con 
handset real estate and combine NOR, SRAM, pseudoSRAM and Nand produc 

Most of today's high-end phones use NOR flash and DRAM. Many smart phor 
feature phones feature two NOR devices-one for code storage and code exec 
the other for data storage. Additionally, a single mobile DRAM device is used 
scratch pad for temporary storage of images and execution of media process 
algorithms. 

Given the state of mobile multimedia, NOR flash has served the handset plat 
However, screen resolution, image resolution and video resolution are trend! 
phenomenal rates, mandating nonvolatile memories with ultrafast storage b< 
and ultralow power consumption. Given the benefits of Nand technology, thi; 
render the choice of NOR a non sequitur. This is particularly the case for real 
capture. 



Video capture and record 
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The data flow requirements of video are quite different than those for image 
Video compression requires constant DRAM read/write access, as the video c 
captured occurs over several minutes, or in some cases, a single hour. DRAh 
power must be accounted for because it plays a large role in overall energy 
consumption. 

While the benefits of mobile DRAM over PC DRAM are obvious in this applicai 
of mobile double data-rate RAM (DDR) over mobile single data-rate RAM (SC 
elusive. By reducing the clock frequency of the mobile DDR device by a facte 
device's active current can be reduced to half that of a mobile SDR device de 
same bandwidth. This results in a 35 percent reduction in power consumptio 
compared to a mobile SDR device. 

For the calculations below, assume a user takes 10 15-minute video clips du 
course of a week. Further, assume that the user captured these clips at VGA 
using a high-quality MPEG4 encoder with an average bit rate of 1.3 Mbits/se< 
DRAM active current, we can assume single-bank operation. 

Unlike image capture, a single 8-Mbyte bank is sufficient for holding frames, 
kernel and video-processing work space. Video capture and encode at VGA n 
requires on the order of 100 Mbytes/s sustained DRAM bandwidth. 

For this article, let's assume a DRAM device that is capable of delivering 400 
when clocked at 100 MHz. Assuming 50 percent efficiency for the application 
memory controller, systems using this DRAM should be able to sustain 100 ^ 
bandwidth with a 50 percent read/write duty cycle. Duty cycle is defined her 
ratio of the average active DRAM time, or read/write accesses, to average D 
time, or refresh mode: 

Usable DDR BW = (DDR controller efficiency) x (DDR read/write duty cycle) 
bandwidth) 

= (50 percent) x (50 percent) x (400 Mbit/s) = 100 Mbits/s 
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The DRAM energy consumed is calculated using the effective duty cycle abov 

mA-hrDRAM_active = [(Isingle_bank_active) x (duty cycle) x (15-minute vie 
(number of clips/week)]/3,600 

mA-hrDRAM_active = (45 mA) x (50 percent) x (15 x 60) x (10)/3,600 = 57 

While NOR*s program rate can handle a video bit rate of 1.3 Mbits/s, it must 
total of 150 minutes storing the video during our contrived test week. Using 
below for the case of video capture, we arrive at: 

mA-hrNOR = [(number of yideo-clips/week) x (Iprogram) x (program time p 
minute video clip)]/3,600 

mA-hrNOR = (10) x (36 mA) x (975 seconds)/3,600 = 98 mA-hr 

If we assume same program time for NAND (150 minutes), energy consump 
Nand will be 22 percent that for NOR since Nand program current is 8 mA, v 
36 mA. This would yield a Nand energy consumption of approximately 22 m/ 
However, algorithm developers can reduce this further by buffering up comp 
in DRAM for deferred ultra-fast storate to Nand. By doing this, program time 
150 min of video (1.4 Gbytes) approaches that achieved if one were writing 
Mbytes/s. 

Since the video bit rate is so low, energy consumed buffering up compressec 
DRAM is a function of self-refresh current (approximately 0.15 mA)]. Compa 
current consumed during Nand program operation (8 mA), it becomes clear 
battle against time, buffering in DRAM has a tremendous advantage. 

The equations below are used to determine energy consumption for Nand de 
DRAM devices with the assumption that system program time approaches th 
using a 4-Mbyte/s Nand device. 

mA-hr512 Mbit_Nand = (10) x (8 mA) x (37 seconds)/3,600 = 0.82 mA-hr 

mA-hr256 Mbit_DRAM = (10) x (0.15 mA) x (900)/3,600 = 0.375 mA-hr 

Taking the results from all of the equation above, the power consumption foi 
NOR/mobile DDR subsystem comes in at 155 mA-hr, while that for a Nand/n 
memory subsystem measures 58 mA-hr. 

While the advantages of Nand/DRAM-based systems shown above are impre 
new wireless frontier will stimulate the sagest memory suppliers to innovate 
areas. In the quest for lower power, we can expect future Nand/DRAM comb 
feature enhanced interfaces, novel packaging and innovative architectural eli 
Regardless of the innovative path, one thing is certain: The mobile memory : 
play a pivotal role in reducing power and enhancing the user's experience of 
handsets. 

Ivan K. Greenberg fiqreenberq@ssi. Samsung. com) is director of strategic ma 
Samsung Semiconductor (San Jose, Calif.). 
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